Critical: Red Hat Security Advisory: : Updated OpenSSH packages fix potential vulnerabilities

Updated OpenSSH packages are now available that fix bugs that may be remotely exploitable. Updated 17 Sep 2003 Updated packages are now available to fix additional buffer manipulation problems which were fixed in OpenSSH 3.7.1. The Common Vulnerabilities and Exposures project cve.mitre.org has...

[SECURITY] [DSA-381-1] New mysql packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 381-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 13th, 2003 http://www.debian.org/security/faq -...

Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow

According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

DSA-345 xbl - buffer overflow

Bulletin has no description...

VP-ASP shopexd.asp catalogid Parameter SQL Injection

The remote host is using the VP-ASP software suite. This set of CGIs is vulnerable to a SQL injection bug which may allow an attacker to take the control of the server as an administrator. From there, he can obtain the list of customers, steal their credit card information and more. In addition t...

DSA-331 imagemagick - insecure temporary file

Bulletin has no description...

Yahoo! Audio Conferencing ActiveX control vulnerable to buffer overflow

Overview A remotely exploitable buffer overflow vulnerability has been discovered in the Yahoo! Audio Conferencing ActiveX control. Description The Yahoo! Audio Conferencing ActiveX control is used in the web-based Yahoo! Chat service, as well as in the Win32 Yahoo! Messenger application. There i...

Buffer overflow

Product: Opera Version: 7.10 and other ? OffSite: http://www.opera.com/ Problem: Buffer overflow ------------------------------------------ Opera - popular web-browser. Local and remote buffer overflow will take place if client open in browser this page: DIV...

SLMail < 5.1.0.4433 Multiple Command Remote Overflows

The remote host is running a version of the SLmail SMTP server which is vulnerable to various overflows which may allow to execute arbitrary commands on this host or to disable it remotely. C Tenable Network Security, Inc. Refs: From: "NGSSoftware Insight Security Research" To: Subject: Multiple...

Horde IMP mailbox.php3 Multiple Parameter SQL Injection

The remote server is running IMP, a web-based mail client. There is a bug in the installed version which allows an attacker to perform a SQL injection attack using the 'actionID' parameter of the 'mailbox.php3' script. An attacker may use this flaw to gain unauthorized access to a user mailbox or...

Sendmail < 8.7.6 Multiple Local Vulnerabilities

The remote Sendmail server, according to its version number, has a buffer overflow and denial of service problem. Using a flaw in the GECOS field handling, it may allow a local user to gain root access. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised...

IBM Lotus Domino < 5.0.12 / 6.0.1 Multiple Vulnerabilities

The remote Lotus Domino server, according to its version number, is affected by various buffer overflows affecting it when it acts as a client through webretriever or in LDAP. An attacker may use these to disable this server or execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C...

SSH ssh-keygen with Secure-RPC SUN-DES-1 Phrase Recovery

The remote host is running a version of SSH Communications Security SSH comprised between versions 1.2.27 and 1.2.30. With Secure-RPC, this version can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private ke...

Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav module format string vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Apache moddav module format string vulnerability Advisory number: CSSA-2003-007.0 Issue date: 2003 February 17 Cross reference: 1...

[SECURITY] [DSA 228-1] New libmcrypt packages fix buffer overflows and memory leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 228-1 [email protected] http://www.debian.org/security/ Martin Schulze January 14th, 2003 http://www.debian.org/security/faq -...

Proxy vulnerability in TrendMicro InterScan-VirusWall V3.6

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings! A quite well known i.e. ancient type of proxy vulnerability was found for TrendMicro's InterScan VirusWall V3.6 This general problem has been known to be an issue with plain HTTP proxies like the Squid for ages e.g...

Security Update: [CSSA-2002-048.0] Linux: wwwoffled remote access vulnerability

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: wwwoffled remote access vulnerability Advisory number: CSSA-2002-048.0 Issue date: 2002 November 18 Cross reference: 1. Problem...

Security Update: [CSSA-2002-044.0] Linux: Preboot eXecution Environment &#40;PXE&#41; server denial-of-service attacks

To: [email protected] [email protected] [email protected] [email protected] SCO Security Advisory Subject: Linux: Preboot eXecution Environment PXE server denial-of-service attacks Advisory number: CSSA-2002-044.0 Issue date: 2002 November 11 Cross...

[SNS Advisory No.57] AN HTTPD Cross-site Scripting Vulnerability

---------------------------------------------------------------------- SNS Advisory No.57 AN HTTPD Cross-site Scripting Vulnerability Problem first discovered: Wed, 23 Oct 2002 Published: Mon, 28 Oct 2002 Reference: http://www.lac.co.jp/security/english/snsadve/57e.html...

NetBSD Security Advisory 2002-019: Buffer overrun in talkd

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2002-019 ================================= Topic: Buffer overrun in talkd Version: NetBSD-current: source prior to September 20, 2002 NetBSD 1.6: affected NetBSD-1.5.3: affected NetBSD-1.5.2: affected NetBSD-1.5.1: affected NetBSD-1.5:...